Vulnerabilidades en OpenIdentityPlatform
36 resultadosCVE-2026-44202MEDIUMOpenAM Authenticated Server-Side Request Forgery (SSRF) via `/sessionservice`EPSS 0.4%CVE-2026-73644CRITICALOpenDJ: Authorization bypass in SASL PLAIN allowing a `proxied-auth` holder to impersonate any resolvable non-root user without an ACI proxy grantEPSS 0.4%CVE-2026-53660HIGHOpenAM Insecure SSO Cookie InitializationEPSS 0.4%CVE-2025-27497HIGHOpenDJ Denial of Service (Dos) using alias loopEPSS 0.4%CVE-2025-64099HIGHOpenAM allows use of arbitrary OIDC requested claims values in id_token and user_infoEPSS 0.4%CVE-2026-45049HIGHOpenAM Session Hijacking via CDSSOEPSS 0.3%CVE-2026-62280MEDIUMOpenAM Reflected XSS in the OAuth2/OIDC `wap` consent pageEPSS 0.3%CVE-2026-105120MEDIUMOpenAM before 16.1.3 Cross-Realm Session Disclosure via Sessions REST EndpointEPSS 0.3%CVE-2026-105121MEDIUMOpenAM before 16.1.3 Improper Authorization in Delegated Session-Destroy Realm ScopingEPSS 0.3%CVE-2026-105122MEDIUMOpenAM before 16.1.3 SSRF via OpenID Connect Client jwks_uriEPSS 0.2%CVE-2026-105119HIGHOpenAM before 16.1.3 PKCE Enforcement Bypass via OAuth 2.0 Hybrid FlowsEPSS 0.2%CVE-2026-46560HIGHOpenAM Authentication Bypass via RADIUS SpoofingEPSS 0.2%CVE-2026-105114MEDIUMOpenAM before 16.1.3 Reflected XSS via OAuth2 Authorization Error PageEPSS 0.2%CVE-2026-105117MEDIUMOpenAM before 16.1.3 Email Content Injection via Users REST Self-Service ActionsEPSS 0.2%CVE-2026-105116MEDIUMOpenAM before 16.1.3 Latent XSS in SAML Load-Balancer Cookie Bounce PageEPSS 0.2%CVE-2026-105118LOWOpenAM before 16.1.3 Open Redirect via Unverified id_token_hint in endSessionEPSS 0.1%